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REMARKS 

Applicants note with appreciation the Examiners allowance of claims 10-14, 16-18, 21-28, 
30-32, 35-37 and 39-48. Applicants, however, submit the following comments regarding the 
Examiner's Reasons for Allowance stated on Page 2 of the Notice of Allowance. In the Reasons for 
Allowance, the Examiner indicated that the prior art fails to teach or suggest "aggregating one or 
more signatures in a first memory to produce one or more signature vectors to be aggregated over a 
collection interval, plus archiving the signature vectors, randomly zeroing a fraction of one or more 
signature vectors & merging the signature vector bits older than a time interval." This statement of 
reasons for allowance appears to be directed to the features of independent claims 10 and 24. 
Applicants note, however, that independent claims 39 and 40 recite combinations of features not 
suggested or disclosed by the references of record. 

For example, claim 39 recites a system that includes "a first memory," "a second memory," 
"one or more signature taps configured to: receive packets at the node, and compute one or more 
signatures for each of the received packets," "a multiplexer configured to: use each of the one or 
more signatures as addresses for addressing bit locations in the first memory", and "set memory bits 
in the addresses of the first memory corresponding to each of the one of more signatures" and "a 
controller configured to archive a signature vector comprising a block of memory bits from the first 
memory in the second memory." 

Furthermore, claim 40 recites a system that includes "a first memory," "a second memory," 
"a signature tap to determine at least one signature for each packet of a plurality of received 
packets," "a multiplexer to store, over a collection interval, the determined at least one signature for 
each of the plurality of received packets in the first memory to produce a signature vector that 
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comprises a block of a plurality of signatures for at least a portion of the plurality of received 

packets" and "a controller configured to archive the signature vector in the second memory after an 

expiration of the collection interval." Applicants submit that it is the novel and non-obvious 

combination of features recited in both independent claims 39 and 40 that distinguish these claims 

over the references of record. 

Additionally, in the Reasons for Allowance, the Examiner stated that "the limitation 

'signature' has an intrinsic definition of any variants of hashing algorithms such as MD5 message 

digest algorithm, secure hash algorithm (SHS), RIPEMD-160, message authentication codes, or 

Cyclical Redundancy Checking." In asserting this "intrinsic definition" of the term "signature," the 

Examiner cites to pg. 9 of Applicants' specification. Paragraph [0032] on page 9 of Applicants' 

specification sets forth the following: 

Data generation agent 520 may use any technique for computing the signatures of 
each incoming packet. Such techniques may include hashing algorithms (e.g., MD5 
message digest algorithm, secure hash algorithm (SHS), RIPEMD-160), message 
authentication codes (MACs), or Cyclical Redundancy Checking (CRC) algorithms, 
such as CRC-32. (emphasis added) 

As shown in paragraph [0032] above, the data generation agent 520 may use any technique for 
computing signatures, and such techniques may include the described exemplary hashing 
algorithms. The described hashing algorithms merely represent a few examples of a number of 
techniques for computing signatures. Thus, the "signatures" recited in Applicants' claims may be 
derived using any technique for computing signatures of an incoming packet, and are not limited to 
"any variants of hashing algorithms" as stated by the Examiner in the Reasons for Allowance. 
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Applicants believe no fee is due with this response other than as reflected on the enclosed 



Issue Fee Transmittal. However, if a fee is due, please charge our Deposit Account No. 18-1945, 



under Order No. BBNT-P01-364 from which the undersigned is authorized to draw. 



Dated: February 22, 2007 



Respectfully submitted, 




Registration No.: 54,130 
FISH & NEAVE IP GROUP, ROPES & GRAY 
LLP 

One International Place 

Boston, Massachusetts 02110-2624 

(617) 951-7000 

(617) 951-7050 (Fax) 

Attorneys/Agents For Applicant 
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